Processes, Roles and Their Interactions 



Johannes Reich, johannes.reich@sophoscape.de 



Taking an interaction network oriented perspective in informatics raises the challenge to describe 
deterministic finite systems which take part in networks of nondeterministic interactions. The tra- 
ditional approach to describe processes as stepwise executable activities which are not based on the 
ordinarily nondeterministic interaction shows strong centralization tendencies. As suggested in this 
article, viewing processes and their interactions as complementary can circumvent these centraliza- 
tion tendencies. 

The description of both, processes and their interactions is based on the same building blocks, 
namely finite input output automata (or transducers). Processes are viewed as finite systems that 
take part in multiple, ordinarily nondeterministic interactions. The interactions between processes 
are described as protocols. 

The effects of communication between processes as well as the necessary coordination of dif- 
ferent interactions within a processes are both based on the restriction of the transition relation of 
product automata. The channel based outer coupling represents the causal relation between the out- 
put and the input of different systems. The coordination condition based inner coupling represents 
the causal relation between the input and output of a single system. 

All steps are illustrated with the example of a network of resource administration processes which 
is supposed to provide requesting user processes exclusive access to a single resource. 

1 Introduction 

We are living in an open world of interaction relations. As an example, Fig. [T] sketches a cutout of a 
network of business relations between a buyer, a seller, its stock, a post and a bank. Intuitively, these net- 
works have two key features. First, they represent peer relations in the sense that none of the participants 
is in total control of all the other participants. The participant's actions are, in general, not determined 
by their interactions. Second, they are open in the sense that we will never be able to describe them 
completely. Each participant will also interact in many other roles in other networks. 




Figure 1 : A cutout of an open business network. 
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In informatics, the interacting systems are often called processes. So, taking a process or inter- 
action network oriented perspective in informatics raises the challenge to describe deterministic finite 
systems which take part in networks of nondeterministic interactions. The traditional approach to model 
processes as stepwise executable activities leads to strong centralization tendencies (see lfl4l [2)). The 
contribution of this article is a formalism based on finite input output automata to describe processes 
and their interactions in a complementary way avoiding these centralization tendencies. We present two 
coupling mechanisms for system parts: the outer or interaction coupling, described by protocols and 
the inner or action coupling, leading to processes. The duality of system specifications from a process 
perspective and from an interaction perspective actually has been recognized as early as 1976 by Chris 
A. Vissers lfl6l . 

The rest of this article is structured as follows. Next, a concrete example of such an open interaction 
network is introduced. In section [2] the technical building blocks, the finite input output automata, are 
presented. Section|3] and [4] define the outer and inner coupling mechanisms. In section [5] related work is 
presented and in section [6] the results are discussed. 



1.1 Preliminaries 

Throughout this article, elements and functions are denoted by small letters, sets and relations by large 
letters and mathematical structures by large calligraphic letters. The components of a structure may be 
denoted by the structure's symbol or - in case of enumerated structures - index as subscript. The subscript 
is dropped if it is clear to which structure a component belongs. 

For any character set or alphabet A, A £ := A U {e} with e is the empty character. For state value sets 
£2> Q £ :=2U{e} with £ is the undefined value. If either a character or state value set A = A\ x . . . x A n 
is a Cartesian product then A e = Af x . . . x A 6 ,. Additionally, a state vector (pi, . . . ,p n ) where p k belongs 
to structure jz4 is written as p and the change of this vector in a position k from p to q is written as 
p . An n-dimensional vector of characters with the k-th component v and the rest e is written as 

e[v,k] = (e u ---,e k -i,v,e k+ i,...,e n ). 

In the main article, I will talk about processes and their parts in a relational sense, which means that 
I actually talk about them at the level of their specification. The relation to the functional level of (finite) 
systems is shown in the appendix. 

The part of a process that is directly related to an interaction is called a role. 



1.2 Example 

In Fig. [2] the open network of resource administration processes is shown. In its core, it consists of two 
different interactions. The first interaction is about the classical problem of mutual exclusion (e.g. Il6l0. 
Some process requests exclusive access to a resource and a resource administration process admits it. 
The second interaction concerns the coordination of the different resource administration processes for 
administering the exclusive access to the resource, where I chose the token ring protocol. 



1.2.1 First Interaction: Protocol of Mutual Exclusion 

The first interaction with its two roles % and <?f is displayed in Fig. [3] % has the state values remn^/ 
(for remainder region), tryt% (for trying region), cn'% (for critical region) and exit% (for exit region), 
while has the state values remmg, try^, criUg and exiUg. 
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Figure 2: A network of interacting processes where n resource administrator processes Mi interact in 
a ring topology with timers and resource demanding processes which themselves interact with an 
unknown number of other processes. The different colors mark the "roles" of the processes, that is those 
process parts that are directly related to the interactions. Red marks the protocol of mutual exclusion, 
blue marks the token ring protocol. 

Initially, % and are in the state {remn<% , renins). If requests the resource, it notifies with 
a reg-character (for request) and transits into its try<% state. If the resource is free for use, confirms 
the request with a cf-reg-character, transits into its cr/% state and now provides the resource for usage. 

receives the cf-reg-character, transits to its cr/% state and now could use the resource (omitted). 
releases the resource with sending a //^-character (for finalize), which is confirmed by "«f with sending 
a c/-/(7i-cfiaracter back to c €, so that at the end of the cycle, both, % as well as are again in their remn 
state. 



1.2.2 Second Interaction: Token Ring Protocol 

The token ring protocol is illustrated in Fig. [4]and consists of a quadruple interaction between a process, 
its two neighbor processes, and a timer for each process. Each Mi can take one out of three state values 
abst (for absent), avlb (for available) and interm (for intermediate). Each timer can take either wait or 
triggered. The protocol has to ensure that one Mi is not in abst where it is allowed to provide access 
to the resource. Initially, M\ is initialized with value avlb and timer\ with triggered while all other 
processes are initialized with abst and all other timers with wait. 

Mi waits in the state abst for reception of the token from Mi-\ (or in case of i = 1, M\ waits for M n ) 
to transit into state avlb in case of its reception and to trigger its timer. It rests there until it receives the 
timeout which results in a transition to interm. Finally, M{ hands over the token to Mj + \ (or in case of 
i = n, M n hands over to M\) and transits back to abst. 
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Figure 3: State diagram of the protocol of mutual exclusion where a resource administrator process in 
its role \f€ manages the exclusive usage of a single resource for the user process in its role % . 



2 The Building Blocks: Finite Input/Output Automata 

Finite input output automata will later be used to describe both, processes and their interactions. 
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Figure 4: State diagram of the token ring protocol for managing exclusive access to a single resource by 
a resource administrator process Mi. 

Definition 1: A nondeterministic finite I/O automaton (NFIOA) is a tuple si = (Q,I,0,qo,Acc,A). 
Q is the non-empty finite set of state values, / and O are the finite, possibly empty input and output 
alphabets. The elements of Q, I or O are usually assumed to be vectors. For each element of / and O at 
most one component is unequal to e. qo is the initial state value, Acc is the acceptance component and 
A C Q x Q x I e x O e is the transition relation. 

The acceptance component Acc represents the information needed to express the acceptance condi- 
tion. It depends on the computational model of "acceptance". For a finite computation Acc is a set of 
final state values. For an infinite computation a representative acceptance condition is to accept all runs 
in which the set of infinitely often occurring state values is an element of the acceptance component 
(Muller-acceptance), that is Acc C 2 Q 0. 
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Transitions with an £-character as input are called spontaneous. In case that for each (p, i) G Q x I £ 
there is at most one transition (p,q,i,o) G A then A specifies a function 8 : Q x I £ — >• Q x s with 
(q, o) = 8 (p, i). If also no spontaneous transition exists, we have a deterministic automaton or DFIOA (a 
Mealy automaton [[H). 



2.1 Product Automata 



The precondition of any coupling of NFIOAs is to view them as a single automaton where all to-be- 
coupled NFIOAs are viewed together as a product automaton, stepping synchronously and where all 
acceptance conditions are to be fulfilled simultaneously. 

Definition 2: The weakly synchronized product of a set of n NFIOAs ^4 is defined by NFIOA = 

(Q,I,O,q ,Acc,A), with Q m = XQ k , 1% = XI k , O® = XO k , <7 j? = (<?0i, • • • ,qo n )> the common ac- 
ceptance component represents the logical conjunction of the individual components, symbolized as 
Acc og = f\Acc k , Aag := {(p,q, i,o)\ the components of p are reachable states of the srf{ and £/ k provides a 

transition (pk,qk,ik,Ok) with q = p &-,k and i = e[ik,k] and o = e[ok,k] }. I also write SB = 

As each step of the product automaton is achieved by only one component automaton, the input and 
output components of the product automaton again differ from epsilon at most in one component. 



3 Channel Based Restriction and Protocols 
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Channel based restricted product 






Figure 5: Left, you see the state diagram of the weakly synchronized product of both roles of the 
protocol of mutual exclusion. Right, you see the channel based restricted product. The names of the 
state values have been abbreviated. 

Connecting two systems with a channel imposes certain restrictions on the transition relation of 
their weakly synchronized product automaton as it requires the receiving system to transit only after the 
sending system and with the input of the sending system's output. It thereby transforms the weakly syn- 
chronized product automaton into a stronger synchronized product automaton with a restricted transition 
relation. 

As an example, Fig. [5] shows the state diagram of both, the weakly synchronized product and the 
channel based restricted product of the protocol of mutual exclusion. 

Definition 3: Be S' an NFIOA where Ok is the &-th component of the output alphabet and // is the 
/-th component of the input alphabet and Ok C //. The pair (k,l) is called a channel if it parametrizes 
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the channel based restriction (cbr) operator in the following way leading to the channel based restricted 
automaton & = cbran(3?). 

1- Q&> = Q,<7, = L?i Ogs = Oy, Acc^z = Acc,y, = ^0^- 

2. BepSQ^a reachable state of & (and thereby also of 3?) which was reached by a transition with 
an output component e[o,k] G (i.e. G Ok). Then all transitions of A*r which start from p 
and have s[o,l] G /g> (i.e. o G /;) as input character are also elements of Ags. I call the transition 
providing the character sending transition, the ensuing transitions receiving transitions and such a 
state p excited. 

3. Be p G <2 either the initial state or a reachable state of & which was reached by a transition with 
a character o G Op with ot = £ that is no output on the channel. Then all spontaneous transitions 
of 3* which start from p and all transitions of 37 which have an input not associated with the 
channel are elements of A@>. I call such a state p relaxed^ 

Input and output components which are not associated with a channel are called open. For an illus- 
tration of the resulting transition classes, see Tab. [T] 



Type of start state 


Input 


Output 


Type of target state 


relaxed 


£ 


£ 


relaxed 


relaxed 


£ 


e\p,k] 


excited 


relaxed 


£ 




relaxed 


relaxed 


e[a,i 7^ /] 


£ 


relaxed 


relaxed 


e[a,i / 1] 


e\fi,k] 


excited 


relaxed 


e[a,i / 1] 


£[P,i^k] 


relaxed 


excited 


s[a,l] 


£ 


relaxed 


excited 


s[a,l] 


e\fi,k] 


excited 


excited 


s[a,l] 


e\P,i^k] 


relaxed 



Table 1: This table shows the possible transition classes for channel based restrictions. e[a,i 7^ I] 
means a class of n-dimensional character vectors with only some fix = a / £ where a is a character 
variable and not an individual character. 

A relaxed state allows for 6 possible transition classes. As input there is either e for a spontaneous 
transition or there is a character not associated with the channel (k, I), namely £ [a, i^l]. As output there 
is either a character with a non vanishing component k on the channel, leading to a new excited state, or 
a character with a non vanishing component i 7^ k somewhere else, or no output at all. 
An excited state allows for three possible transition classes as there must be a channel associated input 
character a. The output is the same as for the relaxed state. 

Proposition 1: Be 37 an NFIOA whose input and output alphabet are at least 2 dimensional and two 
channels (k,l) and (m,n) with k^m and / / n. Then the cor-operator for either channel commute: 
cbrk^cbrm^ST)) = cbr m ^ l {cbr^i{3 r y). Thus, the cor-operator can also be indexed with a set of chan- 
nels. 



Please note that being excited or relaxed is per se not a static but a dynamic attribute of a state as it depends on how it was 
entered. 
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Proof: To prove the proposition, it suffice to show that the rules, prescribing the proper transitions for 
the combined operator do not depend on the sequence of application of the operators for both channels. 
This is illustrated in Tab. |2] 



Type of start state 


Input 


Output 


Type of target state 


relaxed 




£ 




£ 


relaxed 


relaxed 




£ 




i = kV i = m] 


excited 


relaxed 




£ 


e[/3 


i 7^ k&i 7^ m] 


relaxed 


relaxed 


e[a 


i^l&i^n] 




£ 


relaxed 


relaxed 


e[a 


i^l&i^n] 




i = kV i = m] 


excited 


relaxed 


e[a 




e[j3 


i 7^ k&i 7^ m] 


relaxed 


excited 


e[a, 


j = / V i = n\ 




£ 


relaxed 


excited 


e[a, 


i = / V i = n\ 


e[/3, 


i = kV i = m] 


excited 


excited 


e[a, 


i = lVi = n] 


£\fi 


i 7^ k&i m] 


relaxed 



Table 2: This table illustrates the restrictions of 2 consecutive channel operators onto a transition rela- 
tion. The terminology is the same as in Tab. [T] 

A relaxed state allows for 6 different transition classes. Either there is a spontaneous transition or there 
is an input a neither associated with channel (k,l) nor with (m,n). As output there is either a character 
with a non vanishing component iormona channel, each leading to a new excited state, or a character 
with a non vanishing component i neither equaling k nor m, or no output at all, both leading to a new 
relaxed state. 

An exited state allows for 3 possible transition classes. There must be a channel associated input character 
a, either from (k,l) or (m,n). The output is the same as for the relaxed state. 

These rules obviously do not depend on the sequence of the application of the operators for both channels. 

Proposition 2: Be £/ and S3 two NFIOAs and restr an operator that restricts the transition relation of 
SS. Then the following relation holds: restr(stf ® 0) = £/ (g> restr(0). 
The proof is trivial. 

Definition 4: A run as a sequence of states has to be calculated according to the following rules: 

1. Be p a relaxed state, then every spontaneous transition or every transition which have an open 
input (not associated with a channel) can be taken. 

2. Be p an excited state, then any ensuing transition must process this character. 

It is not a priori clear that this procedure creates something meaningful. A necessary condition 
obviously is that there has to be a receiving transition for each sending transition for each channel and 
that the acceptance condition can still be met. I therefore define in accordance with the protocol literature 
(e.g. ID): 

Definition 5: A channel based restricted automaton is called well formed if for every channel mediated 
transition which sends a character (different from £) there exists an induced transition to process it. 
Definition 6: A well formed channel based restricted automaton is called consistent if for each reachable 
state value either the acceptance condition is met or there is at least one continuation such that the 
acceptance condition can be met. 

As a simple consequence, in a consistent channel based restricted automaton all continuations allow 
to meet the acceptance condition. Assuming the contrary that one continuation leads to a reachable 
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state where neither the acceptance condition is already met nor any such continuation exists is a direct 
contradiction to the definition. 

3.1 Protocols 

I would like to focus on the special case where several NFIOAs interact completely via a known set of 
channels, that is with no open input or output components. 

Definition 7: A protocol is a channel based restricted product automaton with no open input or output 
components. I call the individual factor automata roles. 

As was already mentioned in ifTBl the definition of "consistent" directly entails that a consistent 
protocol neither has deadlocks in the sense that there is a single reachable state without any continuation 
such that the acceptance condition holds nor livelocks, characterized by a set of periodical reached states 
without such a continuation. 

Proposition 3: A weakly synchronized product of two protocols is again a protocol. 

Proof: We have to show that for two protocols 3?\ = cbrc { ® M and 3^2 = cbrc 2 ® &i with two sets of 
channels C\ and C2 the following equation holds: 

&\ ® = {cbr Cs icbr C2 ®SSi) = cfcr Cl uc 2 ((® M) ® (®#/). 

This is obviously the case, as the restriction relates only either to the weakly synchronized or 38 \ but 
never simultaneously to both. Therefore it gives the same result, if we weakly synchronize two channel 
based restricted weakly synchronized products or create the channel based restriction over the set union 
of channels of the weakly synchronized products of all automata. 



4 Condition Based Restriction and Processes 

The second mechanism to couple NFIOAs represents the causal relation between the input and output 
of a single system as an inner coupling determined by coordination rules. The goal is to restrict the 
transition set of the weakly synchronized product automaton such that at least a quasi-determinism of 
the formerly nondeterministic transition set is achieved in a sense that from each reachable state there is 
at most one transition for each input character, including the empty character, while the factor NFIOAs 
(the roles) still can be regained by projection. 

In Fig [6] and [7] an example of such an inner coupling for the mutual exclusion protocol is illustrated 
where a process realizes a "man in the middle". It just pass-through the incoming requests and thereby 



combines both protocol roles complementary to example 1.2.1 

Definition 8: A quasi deterministic NFIOA has at most one transition for each input sign, including the 
empty character, from any reachable state. 

Definition 9: Be 8$ an NFIOA and % = (tiq,71j,71o) with 71q : Q@ — > Q,%, %\ : lag — >■ Ig, and %o '■ 
Ogg — > Oag a projection function^] Then the projected automaton stf = Tt{3§) is given by = Kq{Q,<%), 
l d = Ki{l&), Orf = Ko{Ogg), qo^ = 7i Q {qo^), Acc^ = n Q (Acc<%), = {(p',q', i' ,o')\(p,q,i,o) G 
A^and/ = n Q (p),q' = n Q (q),i' = 7ii(i),o' = n {o)}. 

The condition based restriction is supposed to eliminate all transitions from non-reachable states as 
well as all transitions for which a given condition is true. 

Definition 10: Be 3? an NFIOA. A set of conditions E parametrizes the condition based restriction 
2 A projection function K has the special property that % = kotz. 
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Figure 6: State diagram of the two (still independent) roles of a "man in the middle" process within the 
mutual exclusion protocol. 



Unsynchronized product 



u] ■■■ ■■■ ... (T 

cf-req/e ■ ■ ■ 

■ ■■■ ■■■ E 



c, r 

Uf-fin/e l e/fin 





Inner synchronized product 

e/cf- fin 



r\7j reqe — [rTc] 

le/req 



cf-req/e 

0F^M0- 




03 

tf-fin/e k fin 

e, e 




Figure 7: State diagram of the two roles of the mutual exclusion protocol, acting as a "man in the 
middle". Left, you see the weakly synchronized product of both roles. Right, you see the condition 
based restricted product. 



(coticIe) operator such that = condE^S?) with Q^> = = ly, Og> = 0^, Acc^ = Acc^-, and 

= {(p,q,i,o) £ A^jpis areachable state of ST 
ande(p,q,i,o) 6 Eis false}. 

The interesting property of the condition based restriction is, that it may not affect the projection: 
Definition 11: A projection % of an NFIOA 2? is called unaffected by a condition based restriction 
cond E ifn(^) = 7t(cond E {^)). 

Definition 12: A condition restricted automaton is called consistent if if for each reachable state value 
either the acceptance condition is met or there is at least one continuation such that the acceptance 
condition can be met. 

4.1 Separating inner and outer coupling 

Now, I would like to justify that looking at outer and inner coupling of roles can be separated. I first state 
that 

Proposition 4: Channel and condition based restriction commute. 
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Proof: To prove the proposition we have to show again that the rules to restrict the transition relation 
do not depend on the sequence of application of both operators. Starting from the initial state, the set of 
reachable states is build up inductively. For the initial state, the set of transition to be eliminated is just 
the union of the to-be-eliminated transitions from channel and condition based restriction. The thereby 
determined set of reachable next level nodes is therefore independent of the sequence of application of 
both operators. The same argument applies inductively for the transitions starting from this set as well as 
for any further set of reachable nodes. So in fact, as both operator definitions relate to reachable states, 
the rules for both, excited states and relaxed states of definition [3] become only modified in the sense that 
it has to be checked whether the outgoing transitions are to be additionally excluded by the condition 
based restriction. 

With this in mind, let us assume to have two independent protocols 0P\ = cbrc x (® M) and ^2 = 
cbrc 2 (® where the roles stf n and 38\ actually relate to the same process. The effective inner coupling 
between these two roles is expressed by a condition based restriction operator condz relating only to srf n 
and 3§\. We then have: 

cond E {&>\® Pi) 

3? cond E (cbr Cl uc 2 (((g)M)®((g)^i))) 
™ cbr Cl uc 2 ((0 -O ® cond E (■< <8> #1) ® ((g) #/))) 

i<n i>\ 

So, applying the condition based restriction to some large protocol, involving many different roles 
boils down to applying it only to the roles that are actually coordinated within a given process. In the 
general case, where the condition based restriction relates to arbitrary NFIOA parts of the protocols, 
these NFIOA would have to be permuted to allow for this separation. 

4.2 Processes 

Now, what is a process? As a first try, we could define a process within the presented framework as a 
product automaton from at least two roles of different protocols that are restricted by some coordination 
conditions. Thereby, a process coordinates at least two different interactions. 

Fig. [8]illustrates the example of the introduction. It shows the weakly synchronized product automa- 
ton of the two different roles of a resource administration process together with the to-be-eliminated 
transitions according to the following coordination conditions: 

1. Being in state value (*,abst), no spontaneous transition to state value (crit, *) is allowed. That is, 
the token is needed for any entry into the critical region. 

2. Being in state value (try,*), no spontaneous transition to state value (*,abst) is allowed. That is, 
after an incoming request, it is not allowed to dispose the token. 

3. Being in state value (crit, *), no spontaneous transition to state value (*,abst) is allowed. That is, 
after an incoming request has been acknowledged, it is not allowed to dispose the token. 

4. Being in state value (*,interm), no spontaneous transition to state value (renin, *) is allowed. That 
is, before sending a confirmation for finalization, the token has to be disposed. 
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Figure 8: The weakly synchronized product automaton between the two different roles of a resource 
administration process is shown. The transitions which are eliminated for coordination are marked. 



4.2.1 Determination 

However, we not only want quasi deterministic NFIOAs but deterministic ones because deterministic 
ones specify finite systems (see appendix and e.g. |[T3l ). Fig. |9]shows a simple example, where it seems 
straight forward to eliminate a spontaneous transition. With the usual interpretation of I/O automata, the 
two automata of Fig [9] would be viewed as being behaviorally equivalent. 
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e/b 



•0 



a/b 



Figure 9: Do the NFIOA on the left and on the right specify the same automaton behavior? In case of a 
channel based restricted product automaton it depends on what the rest of the automaton is doing. 

But within a channel based restricted product automaton, both behaviors are equivalent only if the 
rest of the automaton waits until it receives character 'b' - or, in other words, if any other factor automaton 
process the result of the first automaton synchronously. With so called asynchronous processing, another 
factor automaton could transit and show some behavior. Eliminating the intermediate state implies to 
deprive all other factor automata from their chance to transit, possibly changing the behavior of the 
entire product automaton. Eliminating the spontaneous transitions changes the "atomicity of time steps". 

Another problem is that the set of state values might change. As the acceptance component directly 
relates to the set of state values, it must be restated. Also, the projection relation between the restricted 
product automaton and its constituting roles gets lost. A third problem is that we might have to aggregate 
several output characters in one step. 

It appears that moving from the quasi deterministic automaton to a deterministic one, the behavioral 
equivalence of the complete interaction has to be checked. For the quasi deterministic automaton of 
Fig. [8j representing the resource administration process, a behaviorally equivalent fully deterministic 



automaton can be found which is illustrated in Fig. 10 So, deterministic processes do coordinate at 
least two different interactions, but they may have lost their resemblance to the original roles used for the 
definition of their interactions they are involve in. 
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Figure 10: The completely deterministic resource administration process. 



5 Related Work 

There have been many different approaches to the issue of describing processes and their interactions, 
many of them can be subsumed under Richard Mayr's process rewrite systems. He introduced a 
unifying view encompassing many formalisms based on named actions like finite state systems, Petri 
nets, pushdown processes, etc. The most general class he named process rewrite systems. 

It presupposes a countably infinite set of atomic actions Act = {a,b,c, . . .} and a countably infinite 
set of process constants Const = {e,X,Y,Z, . . .}. All process terms that describe the states of the system 
have the form t = £\X\t\ .t 2 \t\\\t 2 . The dynamics of a system is described by a finite set of rules A of 
the form t\ — > t 2 . For every a G Act, the transition relation — > is the smallest relation that satisfies the 
inference rules 

(h A t 2 ) G A ?! A t[ h A t[ 

a ' ii ci /ii ' a i 

h-*h h\\t 2 ^ t[\\t 2 h.t 2 ^t[.t 2 
How would the first interaction, the protocol of mutual exclusion (see. section 1.2. 1| > be described? 



Instead of denoting the input and output, each transition would have to be arbitrarily named. E.g. for 

fry() cf—req() finalize^) cf—finQ 

the user process °a : rem — > try, try — > crit, crit — > exit, exit — > rem and for the resource 

. . . request () send—cf—req() exitQ send— cf— exit 

administration process: rem — > try, try — > crit, crit — > exit, exit — > rem. 

Because these names or labels are arbitrary, they don't help in constructing the transition relation of 
the protocol as a restricted product automaton. Here is how the protocol would have to be described: 

ii try 9 t ii 

rem<% \ \ rem^ — > tryq/\\ rem^g 

. . request () . . 

tryw\\rem v -)• try^\\try<g 



One would not be allowed to mix this with the rules for the single protocol role. As a result, we can not 
use our knowledge of the parts (the roles) to construct the whole (the interactions). 

In essence all approaches that are subsumed with process rewrite systems assume the "atomicity of 
actions" and provide names for identical actions only because they appear differently under different 
perspectives. 

Other approaches that are also based on naming of actions suffer from the same shortcomings, for ex- 
ample Robin Milner's calculus of communicating systems ll9l lT0l , Charles A. R. Hoare's communicating 
sequential processes [5] or Nancy Lynch's distributed algorithms O. 
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The same holds for the currently quite popular BPMN proposal ifTTTl to describe processes and their 
interactions driven by large industry players. There is some similarity between what the BPMN standard 
calls a private (internal) process and a process in my sense, an abstract (public) process and a role 
and a choreography or collaboration (global) process and a protocol. However, if a private process or 
orchestration of services is a combination of executable functionality, it remains unclear, what an 'end- 
to-end' process should be. The logical difference between a private and a public process is not seen as a 
projection but some sort of abstraction where only those activities that are used to communicate to other 
processes plus the order of these activities, are included. A choreography describes the way processes 
coordinate their interactions, which is claimed to allow the process designer to plan their processes for 
inter-operation without introducing conflicts, but no formal connection is made in the specification. 

Also, a comparison to game theory is interesting, The interaction model of game theory is similar to 
the protocol model. As I have shown in lTT2ll . a protocol, enriched by a decision alphabet, can be mapped 
onto a corresponding extensive game without its payoff evaluation. With games, the nondeterminism 
problem of interaction, that the interactions don't determine the actions, is solved by introducing "deci- 
sion" together with a payoff function. Then the decisions determine the actions and the question how 
to act becomes an optimization problem. In contrast, my approach to determine single interactions by 
other interactions leads to a coordination problem. However, there are already game theoretic methods 
to describe the simultaneous play of multiple games by single players which naturally are very similar to 
their process analogons (e.g. Bl). 

6 Discussion 

In this article I presented an approach to describe processes and their interactions with the same technical 
means, namely nondeterministic input output automata (NFIOAs). I presented two complementary ways 
to represent the causal relation between the output and the input of different systems, which I called 
"outer coupling", and between the input and output of the same system, which I called "inner coupling". 
Extending [14], an operator based approach was introduced. 

The openness of the interaction networks is represented by the incompleteness of the interaction 
descriptions in the sense of protocols with respect to the interaction coordinating processes. Constructing 
a process, one needs to know the rest of the interaction network only up to the next interaction partner's 
role in the own interactions. 

Why do protocols provide so many spontaneous transitions, while it is so difficult to get rid of this 
spontaneity when constructing deterministic processes? It is this spontaneity which provides the freedom 
to combine different interactions to coordinating processes. So, protocol design strives for providing role 
descriptions which can be most easily coordinated with other roles, a property which naturally gets lost 
in constructing deterministic processes. 

Currently, instead of "protocol" and "processes", often the more fashionable terms "choreography" 
and "orchestration" are used, especially in the context of a so called "service oriented architecture (SOA)" 
lfI31 . If we identify "choreography" with "protocol" and "orchestration" with "process", we see that 
a single choreography is not supposed to specify the behavior of a system completely as well as an 
orchestration is not supposed to specify any "loose coupling" between two different applications. On the 
contrary it becomes understandable why a modeling of processes as stepwise executable activities which 
is not based on the interaction descriptions leads to strong centralization tendencies and tight coupling 
of the interacting systems. 

The straight forward composition mechanism seems quite attractive for combining different roles 
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flexibly into quasi deterministic processes, just by adding a couple of rules. Unfortunately, things be- 
come more complex if we strive for determinism, which we must if we want to execute our processes 
with the traditional machines. 
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7 Appendix 

The importance of finite I/O automata for the theory of processes stems from the fact that DFIOAs can 
specify finite systems (in a physical sense). Such a system is represented as structure which comprises 
internal as well as externally accessible states in the sense of time dependent properties together with 
function which describes the time evolution of the stated 

Definition 13: A finite system is defined by a tuple 5? = (T,succ,Q,I,0,x,in,out,f). T is the 
enumerable set of time values starting with such that succ : T — > T is the invertible time succes- 
sor function. Q,I and O are the finite sets of state values for the internal, input and output states 
(x, in, out) : T — > (Q,I e ,O e ). f = (f ext ,f int ) '■ I s x Q — > O e x Q is a function describing the time evolution 
or system operation updating the internal and output state in one time step for each t € T: 

fout(t + l)\ = ff xt (in(t),x{t))\ 
\x{t + \) ) \p*(in(t),x(t))J - 

The state values of the I/O-states are also called characters. The «-fold application of the time successor 
function succ is written as t +y n : = succy(t). 

Definition 14: ADFIOA.2/ = [Q^ ,1^ ,0 ^ ,qo,Acc,S) specifies a finite system 5? = (T,succ,Qy,Iy, 
Oy,x,in,out,f) if Qy C Q^, ly C 1^, Oy C O^, x(0) = qo and for any point in time t > in every 
possible sequence, (x(t),x(t + \),in{t),out{t + 1)) G A^. 



This use of then term 'state' is the reason I used the term 'state values' where normally in automata theory the term 'state' 
is used. 



